daily autocommit

diff --git a/.etckeeper b/.etckeeper
index e2c2a1988c9bc8e3597bb3ff526fd465542e4e9f..a478570a7d5cad478871f5ef35fa2dc8f9ae79d4 100755 (executable)
--- a/.etckeeper
+++ b/.etckeeper
@@ -1747,6 +1747,7 @@ maybe chmod 0755 'systemd/system/getty@.service.d'
 maybe chmod 0644 'systemd/system/getty@.service.d/noclear.conf'
 maybe chmod 0755 'systemd/system/icinga2.service.d'
 maybe chmod 0644 'systemd/system/icinga2.service.d/limits.conf'
+maybe chmod 0644 'systemd/system/local.service'
 maybe chmod 0755 'systemd/system/multi-user.target.wants'
 maybe chmod 0755 'systemd/system/network-online.target.wants'
 maybe chmod 0755 'systemd/system/paths.target.wants'

diff --git a/iptables/rules.v4 b/iptables/rules.v4
index 8014ce19c6e8a8d6ca60b06fe9b40488e4ed2723..7fac94fd5725b071d7b1168bf902305ef65dc232 100644 (file)
--- a/iptables/rules.v4
+++ b/iptables/rules.v4
@@ -1,8 +1,8 @@
-# Generated by iptables-save v1.6.0 on Wed Feb 20 21:30:49 2019
+# Generated by iptables-save v1.6.0 on Wed Apr 17 10:32:49 2019
 *filter
 :INPUT ACCEPT [0:0]
 :FORWARD ACCEPT [0:0]
-:OUTPUT ACCEPT [74:23233]
+:OUTPUT ACCEPT [151:34894]
 :f2b-apache - [0:0]
 :f2b-apache-modsecurity - [0:0]
 :f2b-apache-nohome - [0:0]
@@ -40,6 +40,8 @@
 -A f2b-apache -j RETURN
 -A f2b-apache -j RETURN
 -A f2b-apache -j RETURN
+-A f2b-apache -j RETURN
+-A f2b-apache-modsecurity -j RETURN
 -A f2b-apache-modsecurity -j RETURN
 -A f2b-apache-modsecurity -j RETURN
 -A f2b-apache-modsecurity -j RETURN
@@ -48,6 +50,8 @@
 -A f2b-apache-nohome -j RETURN
 -A f2b-apache-nohome -j RETURN
 -A f2b-apache-nohome -j RETURN
+-A f2b-apache-nohome -j RETURN
+-A f2b-apache-noscript -j RETURN
 -A f2b-apache-noscript -j RETURN
 -A f2b-apache-noscript -j RETURN
 -A f2b-apache-noscript -j RETURN
@@ -56,6 +60,8 @@
 -A f2b-apache-overflows -j RETURN
 -A f2b-apache-overflows -j RETURN
 -A f2b-apache-overflows -j RETURN
+-A f2b-apache-overflows -j RETURN
+-A f2b-postfix -j RETURN
 -A f2b-postfix -j RETURN
 -A f2b-postfix -j RETURN
 -A f2b-postfix -j RETURN
@@ -75,6 +81,8 @@
 -A f2b-ssh -j RETURN
 -A f2b-ssh -j RETURN
 -A f2b-ssh -j RETURN
+-A f2b-ssh -j RETURN
+-A f2b-sshd -j RETURN
 -A f2b-sshd -j RETURN
 -A f2b-sshd -j RETURN
 -A f2b-sshd -j RETURN
@@ -97,4 +105,4 @@
 -A rejects -p tcp -m tcp --dport 5060 -j REJECT --reject-with icmp-port-unreachable
 -A rejects -p tcp -m tcp --dport 8080 -j REJECT --reject-with icmp-port-unreachable
 COMMIT
-# Completed on Wed Feb 20 21:30:49 2019
+# Completed on Wed Apr 17 10:32:49 2019

diff --git a/iptables/rules.v6 b/iptables/rules.v6
index e6a8c8a4280dc58a08bbae960dec7f520601cb53..32f866f8cd8333457c3378042263934db60f17df 100644 (file)
--- a/iptables/rules.v6
+++ b/iptables/rules.v6
@@ -1,8 +1,8 @@
-# Generated by ip6tables-save v1.6.0 on Wed Feb 20 21:30:49 2019
+# Generated by ip6tables-save v1.6.0 on Wed Apr 17 10:32:49 2019
 *filter
 :INPUT ACCEPT [0:0]
 :FORWARD ACCEPT [0:0]
-:OUTPUT ACCEPT [17658:7682513]
+:OUTPUT ACCEPT [863770:361407270]
 -A INPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT
 -A INPUT -m conntrack --ctstate RELATED -j ACCEPT
 -A INPUT -p ipv6-icmp -j ACCEPT
@@ -25,4 +25,4 @@
 -A FORWARD -j NFLOG --nflog-prefix  "IPv6 FORWARD Reject " --nflog-threshold 1
 -A FORWARD -j REJECT --reject-with icmp6-port-unreachable
 COMMIT
-# Completed on Wed Feb 20 21:30:49 2019
+# Completed on Wed Apr 17 10:32:49 2019

diff --git a/systemd/system/local.service b/systemd/system/local.service
new file mode 100644 (file)
index 0000000..ba700ac
--- /dev/null
+++ b/systemd/system/local.service
@@ -0,0 +1,12 @@
+[Unit]
+Description=Executed scripts after booting
+After=remote-fs.target postfix.service networking.service rsyslog.service ssh.service bind9.service netfilter-persistent.service libvirt-guests.service mariadb.service
+
+[Service]
+ExecStart=/usr/local/sbin/local_service start
+ExecStop=/usr/local/sbin/local_service stop
+Type=oneshot
+RemainAfterExit=yes
+
+[Install]
+WantedBy=multi-user.target